Connect With an Expert: 888-985-8971
Zultys Security Advisory Notice - SAN25-005 Rev 1.0
Vulnerability in Palo Alto PAN-OS (CVE-2025-4614)
Evaluated Products
Zultys Cloud Services
Impacted Products
Zultys Cloud Services
Affected Releases
Not applicable
Impacted 3rd Party Products
Not applicable
Introduction
On October 9, 2025 details of a Session Token Disclosure vulnerability in the Palo Alto Networks PAN-OS software was published in the National Vulnerability Database under CVE-2025-4614.
The vulnerability enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked.
Description
Zultys has in place best practice network access restrictions which restrict the required CLI access to a limited group of internal administrators.
Impacted Palo Alto network products within the Zultys Cloud Services infrastructure will be upgraded in a staged approach to ensure no negative impact on services.
Customers utilizing a Palo Alto firewall to protect deployed MX systems should review the information available from Palo Alto Networks and ensure the firewall is appropriately updated and/or configured to protect against CVE-2025-4614.
Contact
If additional information is required contact support@zultys.com or your Authorized Zultys Channel Partner.
